I think you misunderstand the security issue that was publicized recently. In any case, captcha has been voted down as a core feature, and there are no plans to include it in core. You can, however, use it on your blog via a plugin.